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SHUT-OFF SYSTEM FOR THE AVOIDANCE OF AN OVERSPEED 
CONDITION IN THE EVENT OF A SHAFT FAILURE 



This application claims priority to German Patent Application DE1 030991 0.7 filed 
5 March 7, 2003, the entirety of which is incorporated by reference herein. 

BACKGROUND OF THE INVENTION 

This invention relates to a shut-off system for the avoidance of an overspeed 
10 condition in the event of a shaft failure, in particular for the interruption of the fuel 
supply of an aircraft engine in the event of a failure of the low-pressure turbine shaft, 
with the energy-consuming end of the respective shaft being connected to a coaxial 
reference shaft. 

15 In particular on aircraft engines, but also on turbomachines in general, a shaft failure, 
especially a failure of the low-pressure turbine shaft, constitutes a considerable 
hazard to persons and property. In the event of a failure of a turbine shaft, the 
energy-generating end of the shaft, i.e. the part of the shaft which is connected to the 
turbine rotor, will run up in an uncontrolled manner since it is now disconnected from 

20 the energy-consuming end of the shaft. Consequently, the engine and/or the aircraft 
may be damaged or destroyed. 

Various devices for the mechanical and/or electronic detection of a shaft failure and 
for the subsequent interruption of the energy supply (fuel supply) to avoid an 
25 overspeed condition and its negative consequences are known. Here, it is crucial 
that a shaft failure is detected as early as possible and the engine is shut off instantly 
by interruption of the fuel supply. 

In an electronic device for the detection or avoidance of an overspeed condition 
30 known from Patent Specification US 4,712,372, two inductive sensors are arranged 
on the toothed turbine shaft, i.e. on the energy-consuming end and on the energy- 
generating end, which produce a speed-proportional signal corresponding to the 
number of pulses counted. If a speed difference resulting from an increase of the 
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speed of that part of the shaft which is connected to the turbine rotor, and thus a 
shaft failure, is detected, a solenoid fuel valve will be actuated and the fuel supply 
interrupted, avoiding further acceleration of the turbine rotor. However, the electronic 
shut-off systems are critical in that their response times are relatively long. For safety 
5 reasons, relatively long shut-off times require a higher material input in the area of 
the turbine which, in turn, leads to an increase in weight. 

Furthermore, mechanical devices are described in which a reference shaft is 
coaxially associated to the turbine shaft and connected to the forward, energy- 

10 consuming end of the turbine shaft. In the event of a shaft failure, the resultant 
rotation of the turbine shaft relative to the reference shaft is used to mechanically 
actuate the fuel shut-off valve. In a known mechanical device of this type for the 
control of overspeed conditions in the event of a failure of the low-pressure turbine 
shaft connecting the low-pressure turbine and the fan of an aircraft engine, recesses 

15 are provided on the rear ends of both shafts. In the event of a shaft failure, the low- 
pressure turbine shaft will rotate relative to the reference shaft and the - initially 
offset - recesses in both shafts will come into coincidence, as a result of which a pre- 
loaded driver provided on the low-pressure turbine shaft will swing out radially and 
engage a wire loop provided at the end of a wire rope. The pull exerted on the wire 

20 rope is transmitted to a fuel shut-off valve to close it, thus limiting the overspeed 
condition by interrupting the fuel supply. The known mechanical devices using a 
reference shaft are disadvantageous in that their response depends on a 
comparatively large angle of relative rotation between the turbine shaft and the 
reference shaft. Also, the purely mechanical design of the shut-off system, and, in 

25 particular, the wire rope connection between the turbine shaft and the fuel shut-off 
valve, incurs high design effort and is susceptible to wear. 

BRIEF SUMMARY OF THE INVENTION 

3 0 In a broad aspect, the present invention provides for a development of the known 
mechanical shut-off systems using a reference shaft to enable a shaft failure to be 
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detected instantly and a resultant overspeed condition to be avoided or controlled 
rapidly. 

It is a particular object of the present invention to provide solution to the above 
5 problems by a shut-off system designed in accordance with the features described 
herein. Further objects and advantages of the present invention become apparent 
from the description below. 

The idea underlying the present invention is that, on the basis of a minor rotation of 
10 the main shaft relative to the reference shaft, a pre-loaded, axially movable signal 
trip element is released and moved with high acceleration and by a short route 
towards a sensor or electric switch mounted on the turbine casing, so that the 
distance change to an inductive, capacitive or similar sensor or the interruption of a 
light beam or a switch actuated by the signal trip element provides an electric signal 
15 by which the energy supply to the energy-generating end (driving end) of the 
respective shaft is interrupted via an electronic circuit. The signal trip element, which 
is held by means of an arrangement of radially protruding driver pins and latches, is 
released by drivers which are arranged immediately adjacent to the driver pins and 
extend from the main shaft. 

20 

In accordance with a further feature of the present invention, the signal trip element 
is a piston including a piston rod and a piston plate which is axially movable within a 
housing of the reference shaft and interacts with at least one pressure spring. The 
housing is located in a locating sleeve which extends from the main shaft and from 
2 5 which the drivers engaging the driver pins of the piston plate protrude radially 
inwards. 

This form of a mechanical-electronic shut-off system combines simplicity of design 
and functional reliability. However, its major advantage lies in the fact that it enables 
30 a shaft failure to be detected instantly, if necessary as early as in the fracture 
initiation phase, and an electric signal for the electronically controlled interruption of 
the further energy supply to be generated immediately, thus avoiding, or at least 
limiting, a dangerous overspeed condition. In contrast to the known safety systems, 
significantly reduced signal trigger times and thus fuel supply shut-off times are 
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obtainable which range, in the present case, between 1 and 3 milliseconds, this 
enabling the risk and extent of damage to be reduced, the safety-relevant 
dimensions of the engine rotors to be decreased and, thus, weight to be saved. 

5 The functional reliability of the overall system results from the fact that all 
components for the release and movement of the signal trip element and for the 
production of the electric signal for the electronic control are, or can be, provided 
redundantly. 

10 BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is more fully described in the light of the accompanying 
drawings showing embodiments and favorable developments and advantageous 
objects thereof. In the drawings, 
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Fig. 1 



is a partial view of a gas turbine engine in the area of the low-pressure 
turbine rotor, with a mechanical-inductive shut-off system for the fuel 
supply in the event of a shaft failure associated with the low-pressure 
turbine shaft, 
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Fig. 2 



is a detailed representation of the mechanical-inductive shut-off device 
as per Fig. 1, 



Fig. 3 



is a developed partial view of the mechanical part of the shut-off device 
in the direction of arrowhead A in Fig. 2, 
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Fig. 4 



is a section along line BB in Fig. 2, 



Fig. 5 



is a circuit arrangement associated with the mechanical-inductive shut- 
off device for the electronically controlled interruption of the fuel supply, 
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Fig. 6 is a sectional view of another embodiment of the shut-off device, here 
with mechanical-optical trigger of the electronically controlled shut-off 
process upon failure of the low-pressure turbine shaft, and 

5 Fig. 7 is a sectional view of a further embodiment of the shut-off device, here 
with mechanical-electrical trigger of the electronically controlled shut-off 
process. 



DETAILED DESCRIPTION OF THE INVENTION 

10 

Fig. 1 shows a partial view of a gas turbine engine in the area of the low-pressure 
turbine rotor 4. As Fig. 1 shows, a reference shaft 2 is arranged coaxially with the 
low-pressure turbine shaft 1 and is positively connected to the forward end (energy- 
consuming end) of the low-pressure turbine shaft 1 (not shown). At the rear end of 

15 the low-pressure turbine shaft 1, a bearing support 3 and the low-pressure turbine 
rotor 4 are arranged. A locating sleeve 6 provided on a mounting flange 5 of the low- 
pressure turbine rotor 4 houses the mechanical part of the shut-off system, this 
mechanical part being firmly connected to the reference shaft 2. Axially opposite of 
the locating sleeve 6, a mounting plate 8 with a threaded-on sensor pad 20 is 

20 installed on the turbine exit casing 7 on which inductive sensors 21 are arranged 
which inductively detect a shaft failure registered by the mechanical part of the shut- 
off system and from which connecting lines 22 lead to an electronic control 24 which 
is electrically connected to a power supply 25 and the fuel shut-off valve 23 (cf. Fig. 
5). 

25 

The mechanical part of the shut-off system, as becomes apparent from Fig. 2, in 
particular, comprises a housing 9 which is attached to the reference shaft 2 on one 
side and located in the locating sleeve 6 connected to the low-pressure turbine shaft 
1 on the other side, the housing 9 featuring a piston guide 1 0 and locating bushes 1 1 
30 which each accommodate a mechanically pre-loaded pressure spring 12 as the 
force-exerting item in the event of a shaft failure. In the piston guide 10, a piston rod 
13 is axially and rotatably moveable which carries, at the end face which is 
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downstream in the direction of flow 15, a piston plate 14 (signal trip element) which is 
loaded by the pressure springs 12 and, at the end face which is upstream in the 
direction of flow 15, a stop bolt 16 which limits the axial movement of the piston 
plate 14 in the direction of flow. The piston rod 13 and the piston plate 14 can be 
5 made of metal, plastic or a composite material, for example carbon fiber, or of a 
combination of light materials and metal. As becomes apparent from the developed 
view A in Fig. 3, in particular, two, or another number of radial, cylindrical driver pins 
17 are formed onto the circumference of the piston plate 14 which, together with the 
corresponding latches 18 provided on the housing 9, retain the piston plate 14 in the 

10 spring-energized initial position. Rotary drivers 19 are formed onto the locating 
sleeve 6 which are spaced from the cylindrical driver pins 17 at a certain rotary 
angle. As already mentioned, inductive sensors 21 are arranged opposite of the 
piston plate 14 and connected to the fuel shut-off valve 23 via the electronic control 
and the power supply 25 for the inductive detection of a shaft failure and the 

15 subsequent interruption of the fuel supply. 

The above-described device for the mechanical-inductive detection of a shaft failure 
and the electronic shut-off of the energy supply to the low-pressure turbine shaft 
functions as follows. 

20 

In the event of a failure of the low-pressure turbine shaft 1, in which no torque is 
transmitted to the low-pressure compressor (energy-consuming side), but the low- 
pressure turbine rotor 4 is still subject to the energy of the core engine flow, a 
relative rotary movement (relative rotation) between the part of the low-pressure 

25 turbine shaft 1 (energy-generating end) which is connected to the low-pressure 
turbine rotor 4 and the reference shaft 2 will occur. At a certain rotary angle shift of 
the low-pressure turbine shaft 1 relative to the reference shaft 2, the drivers 19 
formed onto the locating sleeve 6 will, due to the rotation of the locating sleeve 6 in 
the direction of arrowhead 26, engage the cylindrical driver pins 17 on the piston 

30 plate 14. The piston plate 14 is now co-rotated by the drivers 19 in the direction of 
arrowhead 26 and disengaged from the latches 18 retaining the piston plate 14 in its 
axial position. The piston plate 14, which is now freely moveable in the axial 
direction, is accelerated in the direction of the inductive sensors 21 by the action of 
the pressure springs 12. The change in distance between the piston plate 14 and the 
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inductive sensors 21 generates electric signals in the sensors 21 which are 
transmitted to the electronic control 24 to interrupt the fuel supply via the fuel shut-off 
valve 23. 

5 In contrast to the known electronic and mechanical systems for the shut-off of the 
fuel supply in the event of a shaft failure, significantly shorter signal trip times and 
shut-off times, which here lie in the range of 1 to 3 ms, can be achieved since the 
rotary angle required for the release of the piston plate 14 is reached rapidly and the 
travel of the quickly accelerated piston plate 14 for the tripping of the electric signals 

10 is very short. Consequently, the disks of the low-pressure turbine rotor 4 can be 
designed significantly smaller so that appreciable weight savings are achieved. 
Since the initiation of the shut-off process is independent of the angular position of 
the low-pressure turbine shaft 1 relative to the engine and, therefore, the supply of 
fuel is inhibited at the earliest possible time, the further fuel supply can, in the most 

15 favorable case, be interrupted already upon fracture initiation at the low-pressure 
turbine shaft 1, thus minimizing engine damage. Furthermore, the shut-off system is 
of simple, space-saving and lightweight design and works nearly wear-free. The 
proposed shut-off system also lends itself for the retrofitting of gas turbines. 

20 The mechanical part and the electric signal-producing part of the shut-off system are, 
however, not limited to the present embodiment. For example, the cylindrical driver 
pins 17, the latches 18 and the drivers 19, as well as the pressure springs 12 and the 
sensors 21, can be provided redundantly. Similarly, the pressure spring 12 can be 
arranged centrally in the housing 9. In lieu of the pressure springs 12, other media 

25 acting upon the piston plate 14, for example gas pressure, can be applied. 

Further forms of signal production for the electronic control 24 are possible. For 
example, capacitive, optical or ultrasonic sensors can also be used or the electric 
signal for the electronic control 24 for shutting the fuel shut-off valve 23 can be 
3 0 provided by a switch which, actuated by the piston plate 14, closes (or opens) an 
electric circuit. 

Fig. 6 shows a further embodiment in which the inductive sensors are replaced by an 
optical transmitter 27 and an optical receiver 28 arranged such on the mounting 
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plate 8 that the electric signal required for the electronic control 24 is produced 
when, upon shaft failure, the piston plate 14 is released and moved rearwards 
interrupting the optical path between the optical transmitter 27 and the optical 
receiver 28. Here as well, several pairs of optical transmitters and receivers can be 
5 provided for redundancy. 

In a further embodiment shown in Fig. 7, the electric signal for the electronic control 
24 is produced by means of an electric switching device, with the mechanical shut- 
off mechanism remaining unchanged. In this case, a switch housing 29 is integrated 

10 in the mounting plate 8 in which a switching cylinder 30 is axially moveable. The 
switching cylinder 30, which features a flat tip 31 facing the piston plate 14 and 
locating pins 38 as anti-rotation elements, is provided on its circumference with a 
forward and a rearward locating groove 32 and 33. A radial hole 34 is provided in the 
switch housing 29 in which a locking element consisting of a locating ball 36 loaded 

15 by a spring 35 is arranged. The spring 35 is retained by a screw 37. In the rearward 
area of the switching cylinder 30, a metallic or other type of conductive material 
conductor 40 is provided on an insulator 39 whose surface is flush with the surface 
of the switching cylinder 30. A switch 41 of electrically non-conductive material 
associated with the switch housing 29 features two contact pins 42 which act upon 

20 the periphery of the switching cylinder 30 under the force of a spring 44 retained by a 
screw 43. The enclosure of the switch 41 is sealed to the switching cylinder 30 by 
means of sealing rings 45. In the initial position of the switching cylinder 30 illustrated 
in Fig. 7 (with the low-pressure turbine shaft 1 intact), the locating ball 36 is forced 
into the rear locating groove 33 under spring force and the forward contact pins 42a 

25 touch the electrical conductor 40. If the low-pressure turbine shaft 1 fails, the piston 
plate 14 will be accelerated rearwards in the manner described above, hitting the flat 
tip 31 of the switching cylinder 30 and forcing the switching cylinder 30 rearwards 
until the locating balls 36 engage the forward locating groove 32. Both the forward 
contact pins and the rearward contact pins, 42a and 42b, now rest on the electrical 

3 0 conductor 40. The electric signal produced by the electrical connection so created is 
fed via the connecting line 22 to the electronic control 24 for the actuation of the fuel 
shut-off valve 23. According to the embodiment shown in Fig. 7, two pairs of contact 
pins 42a, 42b, each with two insulators 39, two electrical conductors 40, two locating 
balls 36 and two locating pins 38 are provided. For reasons of functional reliability, 
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these items can also be arranged redundantly, or several switches using other 
operating principles, if applicable, can be provided on the periphery of the switching 
cylinder 30. 
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